Skip to content

Translation in progress Some entries still include text in the original language.

Oct 13 · Tuesday

All papers

Found 4 papers
Filter6

Attack type

Jailbreaks14Prompt injection25Poisoning and backdoors10Extraction and theft4Detection evasion3Malicious use6

Impact

Data and privacy leaks3

System type

LLM applications3

Layer

Prompt layer0Model layer3Application layer4

System component

MCP and skills3RAG8Monitors0Audio1Embeddings3Multimodal4
Select any value within a category; different categories must all match. Counts include the other filters you have selected.Another 201papers have no tags yet and are not included in filtered results.
Attack type：Extraction and theftLayer：Prompt layerLayer：Application layerSystem component：MonitorsSystem component：AudioSystem component：EmbeddingsClear all

Another 201papers do not have category tags yet and are not included in filtered results.

  2. DefensesarXiv 2609.04767

    SHAQ: Privacy-preserving retrieval in vector databases using shadow queries

    Proposes SHAQ, which replaces document embeddings with shadow query embeddings to defend against embedding inversion.

    arXiv
    2609.04767
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    GTR-T5 encoder, DPR
    AbstractSHAQ replaces document embeddings with shadow query embeddings.

    SHAQ is a defense against EIA for cloud vector databases: instead of directly modifying document embeddings, it replaces them with shadow query embeddings.

    Paper analysisRead analysis
  3. AttacksarXiv 2607.01276

    研究者提出嵌入推断攻击 EIA，可在黑盒 IR 系统中识别所用嵌入模型

    提出嵌入推断攻击 EIA，在黑盒 IR 中识别所用嵌入模型

    arXiv
    2607.01276
    Published
    Layer
    Application layer
    Setting
    LLM applications
    Attacker
    Black-box
    Evaluated models
    e5-small, e5-small-v2, e5-base and others19
    AbstractEIA 用无序文档集的差异从候选中识别嵌入模型，并给出 reranker 与阈值下的计数。

    EIA 是在黑盒 IR 上识别所用嵌入模型的攻击。。

    Paper analysisRead analysis
  4. AttacksarXiv 2602.07379

    Aegis: Governance, Integrity, and Security for AI Voice Agents

    Proposes the Aegis red-teaming framework for multi-turn attacks on high-risk voice agents.

    arXiv
    2602.07379
    Published
    Layer
    Application layer
    Setting
    AI Agent
    Evaluated models
    GPT-4o, GPT-4o-mini, Gemini-1.5 Pro and others7
    AbstractAegis red-teams three types of voice agents: query-based access eliminates authentication and leakage successes, but behavioral attacks remain.

    Aegis uses multi-turn red-teaming evaluation on ALLM voice agents already integrated into business systems. The authors call this the first systematic red-teaming framework in this setting.

    Paper analysisRead analysis
You have reached the end